Do you know your data privacy rights?
With the expansion of technology across global markets, there has been a requirement for governments to develop legislation that ensures individuals’ rights to data privacy are protected.
Data privacy protection is essential for any organization to ensure any personal information processed is handled correctly and appropriate safeguards are put in place. Legislation across the world puts specific obligations on organizations regarding how they handle individuals’ personal information. Generally, in terms of international data privacy best practices, organisations have an obligation to:
- Ensure that the personal information is collected from the person to whom the information belongs (data subject) or from a source as authorized by the data subject;
- Ensure that the information is kept confidential and only accessed by people with adequate authorisation to access the personal information;
- Ensure that the personal information will be used in line with the purpose for collection; and
- Ensure that the organization has adequate safeguards in place to keep personal information safe from cyber attacks, data leaks, loss, and damage.
Over and above the requirements imposed on organizations that process personal information, individuals whose information is processed also have specific rights that they can exercise, such as:
• The Right to be informed: The data subject has the right to know what data is collected about them, why it is being collected, how long it will be kept, and with whom the data will be shared.
• The right of access: the data subject has the right to gain access to the information that the organization holds about him/her.
• The right of rectification: the data subject has the right to correct his or her information that is held by any organization. The data subject can also ask the organization to update any inaccurate or incomplete data the organization has on him or her.
• The right to object to processing – the data subject can object to the processing of his or her personal data at any time, in certain situations, and it will depend on the purpose of processing and the lawful basis for processing.
• Rights in relation to automated decision-making and profiling: the data subject has the right not to be subject to automated decision-making. • The right to be forgotten: the data subject has the right to request his or her information be erased from the possession of the organization (subject to certain exceptions)
• The right to restrict processing: The data subject can request that an organization limit the way it uses his/her personal data, for example, the data subject can object to his or her personal details being used for any direct marketing campaigns.
At Multispray, we ensure that all your personal information is treated with care and responsibility while upholding your data protection rights.
To exercise your data privacy rights or if you need assistance with any other data privacy matters, please reach out Multispray via 0169811054
